Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 Sep 2004 17:21:37 -0400
From:      "Dan Langille" <dan@langille.org>
To:        freebsd-vuxml@freebsd.org
Subject:   confused by ranges
Message-ID:  <414C6EA1.25173.34BD6CDE@localhost>

next in thread | raw e-mail | index | archive | help
I'm having a quick look through vuln.xml:

        <range><ge>2.0</ge><lt>2.0.50_3</lt></range>

Intuitively, that means you are vulnerable if you have versions >= 
2.0 or < 2.0.50_3.

Is that correct?  Is that how to apply the rules. I found the DTD 
confused me more than the examples did.

This is an interesting example:

        <range><lt>1.1.2_1</lt></range>
        <range><ge>2.0</ge></range>

Two range statements in the same package... instead of one range with 
two operators.  Why?
-- 
Dan Langille : http://www.langille.org/
BSDCan - The Technical BSD Conference - http://www.bsdcan.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?414C6EA1.25173.34BD6CDE>